* Package name    : golang-github-umisama-go-cpe
  Version         : 0.0~git20190323.cdd6c3c
  Upstream Contact: umisama (Takaaki Ibaraki) <umisama@fe2o3.jp>
* URL             : https://github.com/umisama/go-cpe
* License         : Expat
  Programming Lang: Go
  Description     : Common Platform Enumeration 2.3 library for Go

 A Go implementation of the NIST Common Platform Enumeration (CPE) 2.3
 specification. It builds CPE names and converts between the well-formed
 name (WFN), URI and formatted string bindings, and compares names according
 to the CPE name matching rules.
 .
 grype uses it when transforming NVD records into its vulnerability
 database, so it is a build dependency of grype (ITP
https://bugs.debian.org/1061720). Upstream has no tagged release; the
 version packaged is the commit grype requires.

I intend to maintain this package within the Debian Go Packaging Team.